CVE-2023-25203

CVE-2023-25203: Application vulnerable to SSRF Server Side Request Forgery attacks Description CVE-2023-25203 identifies a vulnerability within the Therefore solution, which is susceptible to Server-Side Request Forgery SSRF attacks due to its use of Aspose software for converting uploaded files...

HiddenNetworks-Python

HiddenNetworks-Python v0.9 Mayo 2020 Hidden Networks es una prueba de concepto basada en el paper del mismo nombre, programada en Python 3.4. Facilita la tarea de analizar máquinas locales y remotas dentro de un dominio, usando WMI para buscar rastros de conexiones de dispositivos USB. Con la...

leprechaun

Leprechaun .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,. .,-' --' --' /...

A-Red-Teamer-diaries

Diarios de un Red-Teamer Notas de acceso público sobre mis experimentos de pentesting/red teaming realizados en varios entornos/infraestructuras controladas que implican jugar con diversas herramientas y técnicas utilizadas por pentesters y redteamers durante una evaluación de seguridad. Proyecto...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

cloudmapper

CloudMapper Nota : La funcionalidad de Visualización de Red comando prepare ya no se mantiene. CloudMapper te ayuda a analizar tus entornos de Amazon Web Services AWS. El propósito original era generar diagramas de red y mostrarlos en tu navegador funcionalidad ya no mantenida. Ahora contiene muc...

LetsMapYourNetwork

Omniscient - Mapeemos Tu Red v2.0 Índice 1. QUÉ ES 2. POR QUÉ ES 3. DÓNDE USARLO 4. Presentaciones 5. Características clave 6. Guía de instalación 7. CÓMO USARLO 8. Entender el Nodo 9. Contribuidor 10. LMYN En Acción 11. Hoja de ruta 12. Contacto QUÉ ES Es de suma importancia para cualquier...

asnmap

用于通过 自治系统（ASN） 信息快速映射组织网络范围的 Go CLI 和库。 功能 • 安装 • 用法 • 运行 asnmap • 加入 Discord 功能 ASN 转 CIDR 查询 组织 转 CIDR 查询 DNS 转 CIDR 查询 IP 转 CIDR 查询 ASN/DNS/IP/组织 输入 JSON/CSV/TEXT 输出 支持标准 输入/输出 安装 asnmap 需要 Go 1.21 才能成功安装。只需运行以下命令或从 发布页面 下载预编译二进制文件即可安装。 go install...

PT-2026-104638

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

xray

XRay ha sido reimplementado en Rust y ampliado con más funcionalidades, este repositorio es código LEGADO. Usehttps://github.com/evilsocket/legba XRAY XRay es una herramienta para la recopilación de OSINT de red, su objetivo es automatizar algunas de las tareas iniciales de recopilación de...

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...

gibson

Gibson Network monitoring tool that maps process-to-network connections, identifies cloud providers, and generates firewall rules. Lightweight agent for collection, server for aggregation, parser for analysis. Screenshots Cross-machine overview — OS version comparison, shared IP detection,...

EUVD-2026-44918

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal...

robot

Good all day, my friends, I finally finished the first versio...

Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore

Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches, and "patch everything in time" stopped working years ago. Stop betting the org on winning that race. You don't control which bug lands. You control what it can reach once it does. That is a question abo...

EUVD-2026-33260

A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

CVE-2023-27163 — request-baskets SSRF Exploit I wrote this ex...

CVE-2026-34360: Server-Side Request Forgery (SSRF)

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the /loadIG HTTP endpoint in the FHIR Validator HTTP service accepts a user-supplied URL via JSON body and makes server-side HTTP requests to it without any hostname,...

CVE-2025-55276 HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability

HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout...

CVE-2025-55276

CVE-2025-55276 concerns HCL Aftermarket DPC and an Internal IP Disclosure issue. Public documents describe an ability for an attacker to obtain a clearer map of an organization’s network layout, potentially aiding further attacks. NVD lists CVSS v3.1 base score 5.3 (Network vector, Low confidenti...